UNSOLVED
Hijacked Browser - DB105
My friend's browser has been hijacked and the home page set to www.db105.com. Has anyone heard of this?
I have run Spybot and Adaware to no avail. I can't find any information on the web about this and if I type the URL into Yahoo or Google it brings back info about Apache servers.
I was helping him over the phone and we didn't try CWShedder or any A/V software yet.
- pab61,
I wasn't able to find out very much about "www. db105. com: 81// o/ u/ i/ index.html". Do not attempt to access that link! Malware suspected! That entry appeared in a list of denied Web sites from a site in Taiwan. I examined the site with a text-mode browser, and found evidence of a downloader that suggests malware.
I'd continue down the path you're pursuing. If Ad-Aware and SpyBot didn't clean things up, and CWShredder doesn't, I'd suggest downloading HijackThis and submitting a HijackThis log to one of the sites listed below.
Subratam.org
BleepingComputer.com
ZerosRealm.com
Be sure to describe the problem your friend is experiencing.
Please see the Alliance of Security Analysis Professionals (A-SAP) site for a complete list of member sites providing support and assistance.
Jim jamez kann
2 Intern
•
860 Posts
133
0
Posted September 23rd, 2004 02:00
How to Remove ZY Web Search
(homepage set to http://db105.com:81/cgi-bin/index.cgi?c=0)
http://www.pchell.com/support/zywebsearch.shtml
100mph
1192 Posts
133
0
Posted September 22nd, 2004 02:00
please see
Spyware/Virus Removal and Prevention:
http://www.fixyourwindows.com/windowsxpsolutions.htm
(Links to online virus scans on the same page)
Good Luck!